MyCity » Zaštita od zlonamernih programa » Kako izbrisati rootkit sa gmer

Kako izbrisati rootkit sa gmer

Napisano na dan: 19.6.2014

Kako izbrisati rootkit sa gmer
Sledeća strana Pagination

Idi na vrh

Poslao: 19 Jun 2014 15:46
Idi na vrh
offline
  • zdr 
  • Građanin
  • Pridružio: 01 Okt 2013
  • Poruke: 190

Skenirao sam komp sa gmer pa mi je izbacilo ovo kako da ih obrisem sada?
GMER 2.1.19357 - gmer.net
Rootkit scan 2014-06-19 15:36:06
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path1Target1Lun0 ST316081 rev.3.AC 149.05GB
Running: fwkf3xn4.exe; Driver: C:\DOCUME~1\Zeljko\LOCALS~1\Temp\uxloakoc.sys


---- Kernel code sections - GMER 2.1 ----

.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF64303C0, 0x84E2FA, 0xE8000020]

---- Devices - GMER 2.1 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys

---- Registry - GMER 2.1 ----

Reg HKLM\SYSTEM\CurrentControlSet\Control\Video\{DF9F8E7A-D398-49F4-9522-389150B8C11A}\0000@D3D_\x3332\x3331 2089309684
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001f81000830
Reg HKLM\SYSTEM\ControlSet002\Control\Video\{DF9F8E7A-D398-49F4-9522-389150B8C11A}\0000@D3D_\x3332\x3331 2089309684
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001f81000830 (not active ControlSet)
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System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
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@jafhciigfadnijnpjglh 0x62 0x61 0x68 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@jafhciigfadnijnpjghh 0x62 0x61 0x68 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@iafageabocnbfjlhpk 0x6B 0x61 0x61 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@happefdljeahocip 0x6B 0x61 0x61 0x62 ...



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
Poslao: 19 Jun 2014 17:06
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Šta tačno želiš da obrišeš? Ovdje ne vidim ništa sporno.



Poslao: 19 Jun 2014 22:36
Idi na vrh
offline
  • zdr 
  • Građanin
  • Pridružio: 01 Okt 2013
  • Poruke: 190

Pa ne znam ja,sta moze odavde Very Happy Posto se ne brise automatski sigurno rucno mora ne znam sta se sme obrisati.

Poslao: 19 Jun 2014 22:40
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Ne vidim ništa za brisanje. Ako sumnjaš da ti je računar zaražen, otvori temu u Ambulanti i isprati uputstvo za otvaranje teme:

http://www.mycity.rs/Ambulanta/
http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

MyCity » Zaštita od zlonamernih programa » Kako izbrisati rootkit sa gmer

Ko je trenutno na forumu
 

Ukupno su 1046 korisnika na forumu :: 34 registrovanih, 7 sakrivenih i 1005 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, avijacija, babaroga, bestguarder, bobomicek, bokisha253, dragoljub11987, Duh sa sekirom, HrcAk47, ILGromovnik, Jakov01, kolateralnasteta, Kriglord, kybonacci, Lazarus, Lucije Kvint, Mcdado, milenko crazy north, mkukoleca, nemkea71, Parker, Povratak1912, Prašinar, radionica1, sabros, Sirius, skvara, Srki94, StepskiVuk, theNedjeljko, trajkoni018, Vlada78, voja64, Žoržo